kernel: protection fault trap, code=0 Stopped at done_flush+0x38: movl %eax,%dr6 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace done_flush() at done_flush+0x38 vm_run(ffff800032556610) at vm_run+0x169 vmmioctl(a00,c0205602,ffff800032556610,81,ffff80002bca5008) at vmmioctl+0x2a1 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd806e0af0e0,c0205602,ffff800032556610,81,fffffd807f7d7618,ffff80002bca5008) at VOP_IOCTL+0x97 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8065867318,c0205602,ffff800032556610,ffff80002bca5008) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002bca5008,ffff8000325567f0,ffff800032556740) at sys_ioctl+0x4a2 syscall(ffff8000325567f0) at syscall+0x5ae mi_syscall sys/sys/syscall_mi.h:183 [inline] syscall(ffff8000325567f0) at syscall+0x5ae sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a692e7f230, count: -8 ddb{1}> show registers rdi 0x6c14 __ALIGN_SIZE+0x5c14 rsi 0xffff8000374e3650 rbp 0xffff800032556360 rbx 0x756e6547 rdx 0x49656e69 rcx 0x6c65746e rax 0x287cd859ef76ebf1 r8 0 r9 0x10000 __ALIGN_SIZE+0xf000 r10 0x41ee2bb6f0be63cd r11 0x3df50d6ae70fbd01 r12 0xffff800029cfbff0 r13 0xffff800029cfbff0 r14 0xffff8000374e3000 r15 0x246 rip 0xffffffff82075ecb done_flush+0x38 cs 0x8 rflags 0x10046 __ALIGN_SIZE+0xf046 rsp 0xffff8000325561c6 ss 0x10 done_flush+0x38: movl %eax,%dr6 ddb{1}> show proc PROC (syz-executor.5) tid=123974 pid=53115 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=55, usrpri=55, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a219550,0xffff80002bca5d60 process=0xffff8000ffff51d0 user=0xffff800032551000, vmspace=0xfffffd8067665ab8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 73341 343482 75442 0 7 0 syz-executor.3 37965 327517 42749 0 2 0 syz-executor.6 53115 278118 38038 0 3 0x80 fsleep syz-executor.5 *53115 123974 38038 0 7 0x4000000 syz-executor.5 70317 263673 96029 0 2 0 syz-executor.2 70317 323293 96029 0 3 0x4000080 fsleep syz-executor.2 70317 17776 96029 0 3 0x4000080 fsleep syz-executor.2 50959 202920 72779 0 2 0 syz-executor.0 24559 268148 72352 0 2 0 syz-executor.7 24559 69776 72352 0 3 0x4000080 fsleep syz-executor.7 24559 446315 72352 0 3 0x4000080 fsleep syz-executor.7 24559 372204 72352 0 3 0x4000080 fsleep syz-executor.7 96029 337515 87211 0 3 0x82 nanoslp syz-executor.2 72352 220739 87211 0 2 0x482 syz-executor.7 29105 291382 0 0 3 0x14200 acct acct 75442 290615 87211 0 3 0x82 nanoslp syz-executor.3 29167 523209 87211 0 3 0x82 nanoslp syz-executor.4 38038 158246 87211 0 2 0x482 syz-executor.5 68518 271784 87211 0 3 0x2 biowait syz-executor.1 72779 454301 87211 0 2 0x482 syz-executor.0 42749 472982 87211 0 3 0x82 nanoslp syz-executor.6 61394 30370 1 0 3 0x100083 ttyopn getty 2201 510429 1 0 3 0x80 fsleep syz-executor.2 2201 281700 1 0 3 0x4000080 piperd syz-executor.2 63859 54115 0 0 3 0x14280 nfsidl nfsio 94417 486357 0 0 3 0x14280 nfsidl nfsio 33231 161602 0 0 3 0x14280 nfsidl nfsio 5073 28211 0 0 3 0x14280 nfsidl nfsio 60390 70409 0 0 3 0x14280 nfsidl nfsio 38549 364579 0 0 3 0x14280 nfsidl nfsio 65427 332852 0 0 3 0x14280 nfsidl nfsio 67715 161269 0 0 3 0x14280 nfsidl nfsio 32728 115111 0 0 3 0x14280 nfsidl nfsio 35675 336213 0 0 3 0x14280 nfsidl nfsio 31329 367158 0 0 3 0x14280 nfsidl nfsio 25663 319302 0 0 3 0x14280 nfsidl nfsio 39726 429486 0 0 3 0x14280 nfsidl nfsio 3355 321692 0 0 3 0x14280 nfsidl nfsio 42488 160398 0 0 3 0x14280 nfsidl nfsio 3750 312238 0 0 3 0x14280 nfsidl nfsio 15412 296501 0 0 3 0x14280 nfsidl nfsio 39527 175025 0 0 3 0x14280 nfsidl nfsio 16687 520711 0 0 3 0x14280 nfsidl nfsio 71847 215140 0 0 3 0x14280 nfsidl nfsio 18249 22625 0 0 3 0x14200 bored sosplice 87211 175252 97023 0 3 0x2000082 wait syz-fuzzer 87211 88352 97023 0 3 0x6000082 nanoslp syz-fuzzer 87211 112060 97023 0 3 0x6000082 thrsleep syz-fuzzer 87211 449029 97023 0 3 0x6000082 wait syz-fuzzer 87211 349872 97023 0 3 0x6000082 thrsleep syz-fuzzer 87211 294178 97023 0 3 0x6000082 wait syz-fuzzer 87211 118127 97023 0 3 0x6000082 wait syz-fuzzer 87211 432777 97023 0 3 0x6000082 wait syz-fuzzer 87211 167180 97023 0 3 0x6000082 wait syz-fuzzer 87211 91932 97023 0 2 0x6000082 syz-fuzzer 87211 217744 97023 0 3 0x6000082 thrsleep syz-fuzzer 87211 260761 97023 0 3 0x6000082 wait syz-fuzzer 87211 280192 97023 0 3 0x6000082 thrsleep syz-fuzzer 87211 475186 97023 0 3 0x6000082 thrsleep syz-fuzzer 87211 426229 97023 0 3 0x6000082 wait syz-fuzzer 87211 403276 97023 0 3 0x6000082 thrsleep syz-fuzzer 97023 473645 93491 0 3 0x10008a sigsusp ksh 93491 495449 19204 0 3 0x9a kqread sshd 19204 300272 1 0 3 0x88 kqread sshd 61556 304539 70649 74 3 0x1100092 bpf pflogd 70649 336743 1 0 3 0x80 netio pflogd 65037 10411 16920 73 2 0x1100010 syslogd 16920 142529 1 0 3 0x100082 netio syslogd 54296 253449 1 0 3 0x100080 kqread resolvd 61398 161585 53192 77 3 0x100092 kqread dhcpleased 78149 5515 53192 77 3 0x100092 kqread dhcpleased 53192 430776 1 0 3 0x80 kqread dhcpleased 40669 373358 0 0 3 0x14200 bored smr 10099 211501 0 0 2 0x14200 zerothread 14943 225650 0 0 3 0x14200 aiodoned aiodoned 1193 466895 0 0 3 0x14200 syncer update 53269 76620 0 0 3 0x14200 cleaner cleaner 468 449904 0 0 3 0x14200 reaper reaper 17654 272922 0 0 3 0x14200 pgdaemon pagedaemon 60046 218169 0 0 3 0x14200 bored viomb 59125 370149 0 0 3 0x40014200 acpi0 acpi0 80775 23264 0 0 3 0x40014200 idle1 7614 339423 0 0 3 0x14200 bored softnet3 16413 118985 0 0 3 0x14200 bored softnet2 69976 220304 0 0 3 0x14200 bored softnet1 78278 237239 0 0 3 0x14200 bored softnet0 62999 20123 0 0 3 0x14200 bored systqmp 81504 398953 0 0 3 0x14200 bored systq 80887 447680 0 0 3 0x14200 tmoslp softclockmp 86554 352537 0 0 3 0x40014200 tmoslp softclock 5849 291036 0 0 3 0x40014200 idle0 1 18456 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 73341 (syz-executor.3) thread 0xffff80002bca67f0 (343482) Process 53115 (syz-executor.5) thread 0xffff80002bca5008 (123974) Process 68518 (syz-executor.1) thread 0xffff80002a229ac0 (271784) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10231 6640K 7071K 166960K 21095 0 pcb 15 20K 22K 166960K 663 0 rtable 246 16K 16K 166960K 1745 0 pf 38 10K 10K 166960K 207 0 ifaddr 48 16K 16K 166960K 243 0 ifgroup 67 2K 2K 166960K 331 0 sysctl 2 0K 0K 166960K 4 0 counters 70 37K 37K 166960K 216 0 ioctlops 0 0K 4K 166960K 1799 0 iov 0 0K 32K 166960K 742 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1519 95K 95K 166960K 5118 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 90 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 875 0 dirhash 12 2K 2K 166960K 51 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 17 61K 97K 166960K 7444 0 sigio 0 0K 0K 166960K 389 0 proc 72 91K 140K 166960K 1974 0 subproc 117 7K 13K 166960K 770 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 351 0 in_multi 99 7K 7K 166960K 619 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 1760 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 512 626K 626K 166960K 74982 0 UVM aobj 131 4K 4K 166960K 134 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 278 0 NDP 15 0K 1K 166960K 180 0 temp 78 6708K 6836K 166960K 68378 0 kqueue 12 18K 28K 166960K 680 0 SYN cache 2 36K 44K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 307 0 304 2 1 1 2 0 8 0 rtentry 112 561 0 451 6 2 4 4 0 8 0 unpcb 144 5802 0 5787 80 79 1 10 0 8 0 syncache 320 55 0 55 16 16 0 1 0 8 0 tcpqe 32 132 0 132 9 9 0 1 0 8 0 tcpcb 808 2414 0 2394 73 70 3 12 0 8 0 arp 120 104 0 86 1 0 1 1 0 8 0 inpcb 376 6801 0 6777 154 151 3 25 0 8 0 nd6 136 139 0 115 1 0 1 1 0 8 0 pkpcb 40 17 0 17 5 5 0 1 0 8 0 kcovpl 48 51 0 42 1 0 1 1 0 8 0 ppxss 1168 20 0 20 8 8 0 1 0 8 0 pffrag 232 49 0 48 4 3 1 1 0 482 0 pffrnode 88 49 0 48 4 3 1 1 0 8 0 pffrent 40 114 0 113 4 3 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 260 0 258 1 0 1 1 0 8 0 pfstkey 128 260 0 258 2 0 2 2 0 8 1 pfstate 376 260 0 258 5 3 2 4 0 8 1 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2203 0 1741 52 23 29 30 0 8 0 art_table 32 2204 0 1741 4 0 4 4 0 8 0 art_node 16 557 0 457 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 0 1 0 1 1 0 8 0 semupl 112 5 0 5 1 1 0 1 0 8 0 semapl 112 871 0 861 1 0 1 1 0 8 0 shmpl 112 131 0 3 4 0 4 4 0 8 0 dirhash 1024 43 0 26 3 0 3 3 0 8 0 dino2pl 256 10614 0 9124 94 0 94 94 0 8 0 ffsino 272 10614 0 9124 100 0 100 100 0 8 0 nchpl 144 20518 0 18855 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 70527 0 70527 8 7 1 3 0 8 1 percpumem 16 122 0 73 1 0 1 1 0 8 0 vcpupl 2048 51 0 0 7 0 7 7 0 8 0 vmpool 696 56 0 5 5 0 5 5 0 8 0 kstatmem 264 176 0 146 5 2 3 3 0 8 0 scxspl 216 65590 0 65589 34 33 1 8 1 8 0 plimitpl 152 831 0 814 1 0 1 1 0 8 0 sigapl 424 7719 0 7648 11 2 9 9 0 8 0 futexpl 64 69178 0 69171 1 0 1 1 0 8 0 knotepl 120 675 0 0 11 0 11 11 0 8 0 kqueuepl 216 1863 0 1854 37 36 1 5 0 8 0 pipepl 320 1766 0 1736 54 51 3 8 0 8 0 fdescpl 496 7675 0 7645 6 1 5 5 0 8 0 filepl 152 46361 0 46096 123 111 12 24 0 8 0 lockfpl 104 1580 0 1578 3 2 1 2 0 8 0 lockfspl 48 663 0 661 1 0 1 1 0 8 0 sessionpl 144 69 0 51 1 0 1 1 0 8 0 pgrppl 48 101 0 83 1 0 1 1 0 8 0 ucredpl 104 5531 0 5516 1 0 1 1 0 8 0 zombiepl 144 7649 0 7648 1 0 1 1 0 8 0 processpl 1136 7719 0 7648 7 1 6 6 0 8 0 procpl 680 20883 0 20790 19 10 9 10 0 8 0 srpgc 96 48 0 48 16 16 0 1 0 8 0 sosppl 168 83 0 83 15 15 0 1 0 8 0 sockpl 584 12973 0 12931 174 170 4 20 0 8 0 mcl64k 65536 33 0 0 4 1 3 3 0 8 0 mcl16k 16384 25 0 0 4 1 3 3 0 8 0 mcl12k 12288 25 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 26 0 0 3 0 3 3 0 8 0 mcl4k 4096 41 0 0 3 0 3 3 0 8 0 mcl2k2 2112 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 439 0 0 34 4 30 34 0 8 0 mtagpl 96 462 0 0 7 1 6 6 0 8 0 mbufpl 256 1350 0 0 64 0 64 64 0 8 0 bufpl 280 17591 0 11272 452 0 452 452 0 8 0 anonpl 24 929138 0 915138 207 92 115 116 0 186 7 amapchunkpl 152 235546 0 234587 61 10 51 51 0 158 6 amappl16 200 20790 0 20350 151 126 25 37 0 8 0 amappl15 192 13 0 13 2 2 0 1 0 8 0 amappl14 184 284 0 270 2 1 1 2 0 8 0 amappl13 176 148 0 146 1 0 1 1 0 8 0 amappl12 168 8931 0 8897 4 2 2 3 0 8 0 amappl11 160 56 0 42 1 0 1 1 0 8 0 amappl10 152 102 0 88 1 0 1 1 0 8 0 amappl9 144 207 0 207 14 14 0 1 0 8 0 amappl8 136 569 0 454 5 1 4 4 0 8 0 amappl7 128 292 0 264 2 0 2 2 0 8 0 amappl6 120 881 0 866 1 0 1 1 0 8 0 amappl5 112 244 0 232 1 0 1 1 0 8 0 amappl4 104 863 0 824 3 1 2 2 0 8 0 amappl3 96 45728 0 45632 13 10 3 4 0 8 0 amappl2 88 8571 0 8483 9 6 3 3 0 8 1 amappl1 80 38391 0 37827 23 9 14 23 0 8 0 amappl 88 73902 0 73602 10 2 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 133 0 3 3 0 3 3 0 8 0 uaddrrnd 24 7732 0 7651 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7732 0 7651 1 0 1 1 0 8 0 vmmpekpl 168 66980 0 66912 4 0 4 4 0 8 0 vmmpepl 168 491913 0 489375 338 208 130 156 0 357 0 vmsppl 448 7731 0 7651 10 1 9 9 0 8 0 rwobjpl 56 129041 0 121313 119 6 113 113 0 8 0 pdppl 4096 15471 0 15353 680 560 120 120 0 8 2 pvpl 32 41984 0 0 340 1 339 339 0 265 0 pmappl 248 7731 0 7651 7 1 6 6 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1344 0 857 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82cbeff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xb sys/dev/kcov.c:154 uvm_fault(fffffd8066be5e40,3f312ff7000,0,2) at uvm_fault+0xf2 sys/uvm/uvm_fault.c:600 upageflttrap(ffff800034bece20,3f312ff7084) at upageflttrap+0x86 sys/arch/amd64/amd64/trap.c:188 usertrap(ffff800034bece20) at usertrap+0x226 sys/arch/amd64/amd64/trap.c:436 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x78180aa81920, count: -8 ddb{0}> machine ddbcpu 1 Stopped at done_flush+0x38: movl %eax,%dr6 ddb{1}> trace done_flush() at done_flush+0x38 vm_run(ffff800032556610) at vm_run+0x169 vmmioctl(a00,c0205602,ffff800032556610,81,ffff80002bca5008) at vmmioctl+0x2a1 sys/dev/vmm/vmm.c:242 VOP_IOCTL(fffffd806e0af0e0,c0205602,ffff800032556610,81,fffffd807f7d7618,ffff80002bca5008) at VOP_IOCTL+0x97 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd8065867318,c0205602,ffff800032556610,ffff80002bca5008) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525 sys_ioctl(ffff80002bca5008,ffff8000325567f0,ffff800032556740) at sys_ioctl+0x4a2 syscall(ffff8000325567f0) at syscall+0x5ae mi_syscall sys/sys/syscall_mi.h:183 [inline] syscall(ffff8000325567f0) at syscall+0x5ae sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a692e7f230, count: -8